Switch and Router - ebook.konfigurasi.netBrocade Communications Switzerland Sàrl Centre Swissair...

1362
March 25, 2009 ® Switch and Router Command Line Interface Guide Supporting IronCore, JetCore, BigIron MG8, NetIron 40G, FastIron Edge Switch, NetIron IMR 640, and IP-FES

Transcript of Switch and Router - ebook.konfigurasi.netBrocade Communications Switzerland Sàrl Centre Swissair...

  • March 25, 2009

    ®

    Switch and RouterCommand Line Interface Guide

    Supporting IronCore, JetCore, BigIron MG8, NetIron 40G, FastIron Edge Switch, NetIron IMR 640, and IP-FES

  • Copyright © 2009 Brocade Communications Systems, Inc. All Rights Reserved.

    Brocade, the B-wing symbol, BigIron, DCX, Fabric OS, FastIron, IronPoint, IronShield, IronView, IronWare, JetCore, NetIron, SecureIron, ServerIron, StorageX, and TurboIron are registered trademarks, and DCFM, Extraordinary Networks, and SAN Health are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries. All other brands, products, or service names are or may be trademarks or service marks of, and are used to identify, products or services of their respective owners.

    Notice: This document is for informational purposes only and does not set forth any warranty, expressed or implied, concerning any equipment, equipment feature, or service offered or to be offered by Brocade. Brocade reserves the right to make changes to this document at any time, without notice, and assumes no responsibility for its use. This informational document describes features that may not be currently available. Contact a Brocade sales office for information on feature and product availability. Export of technical data contained in this document may require an export license from the United States government.

    The authors and Brocade Communications Systems, Inc. shall have no liability or responsibility to any person or entity with respect to any loss, cost, liability, or damages arising from the information contained in this book or the computer programs that accompany it.

    The product described by this document may contain “open source” software covered by the GNU General Public License or other open source license agreements. To find-out which open source software is included in Brocade products, view the licensing terms applicable to the open source software, and obtain a copy of the programming source code, please visit http://www.brocade.com/support/oscd.

    Brocade Communications Systems, Incorporated

    Document History

    Corporate and Latin American HeadquartersBrocade Communications Systems, Inc.1745 Technology Drive San Jose, CA 95110 Tel: 1-408-333-8000 Fax: 1-408-333-8101 E-mail: [email protected]

    Asia-Pacific HeadquartersBrocade Communications Singapore Pte. Ltd.30 Cecil Street#19-01 Prudential TowerSingapore 049712SingaporeTel: +65-6538-4700Fax: +65-6538-0302E-mail: [email protected]

    European HeadquartersBrocade Communications Switzerland SàrlCentre SwissairTour B - 4ème étage29, Route de l'AéroportCase Postale 105CH-1215 Genève 15Switzerland Tel: +41 22 799 5640Fax: +41 22 799 5641E-mail: [email protected]

    Title Summary of changes Date

    Switch and Router Command Line Interface Guide New document March 2009

  • Contents

    CHAPTER 1Getting Started ....................................................................................... 1-1INTRODUCTION ...........................................................................................................................................1-1AUDIENCE ..................................................................................................................................................1-2NOMENCLATURE .........................................................................................................................................1-2RELATED PUBLICATIONS .............................................................................................................................1-2UPDATES TO MANUALS ...............................................................................................................................1-3HOW TO GET HELP OR REPORT ERRORS ....................................................................................................1-3

    WEB ACCESS .......................................................................................................................................1-3E-MAIL ACCESS ...................................................................................................................................1-3TELEPHONE ACCESS ............................................................................................................................1-3

    WARRANTY COVERAGE ...............................................................................................................................1-3

    CHAPTER 2Using the Command Line Interface ...................................................... 2-1EXEC COMMANDS .....................................................................................................................................2-2

    PRIVILEGED LEVEL ...............................................................................................................................2-2CONFIG COMMANDS .................................................................................................................................2-2

    GLOBAL LEVEL .....................................................................................................................................2-2REDUNDANCY LEVEL (LAYER 3 SWITCHES ONLY) ..................................................................................2-3INTERFACE LEVEL ................................................................................................................................2-3TRUNK LEVEL ......................................................................................................................................2-3IPV6 ACCESS LIST LEVEL ....................................................................................................................2-3ROUTER RIP LEVEL (LAYER 3 SWITCHES ONLY) ...................................................................................2-3IPV6 RIP LEVEL (ONLY ON BROCADE DEVICES THAT SUPPORT IPV6) ....................................................2-3ROUTER OSPF LEVEL (LAYER 3 SWITCHES ONLY) ................................................................................2-3OSPF VERSION 3 LEVEL (ONLY ON BROCADE DEVICES THAT SUPPORT IPV6) .......................................2-3ROUTER IS-IS LEVEL (LAYER 3 SWITCHES ONLY) .................................................................................2-3GLOBAL IS-IS LEVEL (ONLY ON BROCADE DEVICES THAT SUPPORT IPV6) .............................................2-3

    March 2009 © 2009 Brocade Communications Systems, Inc. iii

  • Switch and Router CLI Guide

    IPV4 IS-IS UNICAST ADDRESS FAMILY LEVEL (BROCADE DEVICES THAT SUPPORT IPV6 ONLY) ...............2-3IPV6 IS-IS UNICAST ADDRESS FAMILY LEVEL

    (ONLY ON BROCADE DEVICES THAT SUPPORT IPV6) .......................................................................2-3BGP LEVEL (LAYER 3 SWITCHES ONLY) ...............................................................................................2-4GLOBAL BGP AND BGP4 UNICAST ADDRESS FAMILY LEVEL .................................................................2-4BGP4 MULTICAST ADDRESS FAMILY LEVEL

    (ONLY ON BROCADE DEVICES THAT SUPPORT IPV6) .......................................................................2-4IPV6 BGP UNICAST ADDRESS FAMILY LEVEL

    (ONLY ON BROCADE DEVICES THAT SUPPORT IPV6) .......................................................................2-4IP TUNNEL LEVEL (LAYER 3 SWITCHES ONLY) .......................................................................................2-4IPV6 TUNNEL LEVEL (LAYER 3 SWITCHES ONLY) ...................................................................................2-4ROUTER MSDP LEVEL (LAYER 3 SWITCHES ONLY) ...............................................................................2-4ROUTER DVMRP LEVEL (LAYER 3 SWITCHES ONLY) ............................................................................2-4ROUTER PIM LEVEL (LAYER 3 SWITCHES ONLY) ...................................................................................2-5IPV6 ROUTER PIM LEVEL (ONLY ON BROCADE DEVICES THAT SUPPORT IPV6) ......................................2-5BROADCAST FILTER LEVEL ...................................................................................................................2-5MULTICAST FILTER LEVEL ....................................................................................................................2-5ROUTE MAP LEVEL (LAYER 3 SWITCHES ONLY) .....................................................................................2-5ROUTER VRRP LEVEL (LAYER 3 SWITCHES ONLY) ...............................................................................2-5ROUTER VRRPE LEVEL (LAYER 3 SWITCHES ONLY) .............................................................................2-5MPLS LEVEL .......................................................................................................................................2-5MPLS INTERFACE LEVEL .....................................................................................................................2-5MPLS POLICY LEVEL ...........................................................................................................................2-5MPLS PATH LEVEL ..............................................................................................................................2-5MPLS SIGNALLED LSP LEVEL ..............................................................................................................2-5MPLS SECONDARY PATH LEVEL ..........................................................................................................2-6MPLS RSVP LEVEL ............................................................................................................................2-6MPLS STATIC LSP LEVEL ...................................................................................................................2-6MPLS VLL LEVEL ................................................................................................................................2-6MPLS LDP LEVEL ...............................................................................................................................2-6MPLS VPLS LEVEL .............................................................................................................................2-6VLAN LEVEL .......................................................................................................................................2-6METRO RING LEVEL .............................................................................................................................2-6VSRP LEVEL .......................................................................................................................................2-6TOPOLOGY GROUP LEVEL ....................................................................................................................2-6STP GROUP LEVEL ..............................................................................................................................2-6802.1X PORT SECURITY LEVEL ............................................................................................................2-7MAC PORT SECURITY LEVEL ...............................................................................................................2-7CPU PROTECTION LEVEL .....................................................................................................................2-7GVRP LEVEL .......................................................................................................................................2-7REAL SERVER LEVEL (LAYER 3 SWITCHES ONLY) ..................................................................................2-7APPLICATION PORT LEVEL (LAYER 3 SWITCHES ONLY) ..........................................................................2-7WEB AUTHENTICATION LEVEL AT THE VLAN LEVEL ...............................................................................2-7VPN POLICY LEVEL .............................................................................................................................2-7WIRELESS AP LEVEL ...........................................................................................................................2-8

    ACCESSING THE CLI ...................................................................................................................................2-8

    iv © 2009 Brocade Communications Systems, Inc. March 2009

  • Contents

    NAVIGATING AMONG COMMAND LEVELS ..............................................................................................2-10CLI COMMAND STRUCTURE ................................................................................................................2-10PORT NUMBERS .................................................................................................................................2-10SEARCHING AND FILTERING OUTPUT ...................................................................................................2-11

    SEARCHING AND FILTERING OUTPUT FROM SHOW COMMANDS....................................................... 2-11SEARCHING AND FILTERING OUTPUT AT THE --MORE-- PROMPT.................................................... 2-12USING SPECIAL CHARACTERS IN REGULAR EXPRESSIONS............................................................. 2-14

    SYNTAX SHORTCUTS ..........................................................................................................................2-16SAVING CONFIGURATION CHANGES ....................................................................................................2-16

    CHAPTER 3Command List ........................................................................................ 3-1

    CHAPTER 4USER EXEC LEVEL COMMANDS ................................................................. 4-1

    CHAPTER 5PRIVILEGED EXEC LEVEL COMMANDS........................................................ 5-1

    CHAPTER 6GLOBAL CONFIG LEVEL COMMANDS......................................................... 6-1

    CHAPTER 7REDUNDANT MANAGEMENT MODULE CONFIG LEVEL COMMANDS...................................................................... 7-1

    CHAPTER 8INTERFACE LEVEL COMMANDS.................................................................... 8-1

    CHAPTER 9TRUNK LEVEL COMMANDS .......................................................................... 9-1

    CHAPTER 10IP ACCESS LISTS LEVEL COMMANDS: STANDARD ..................................... 10-1

    CHAPTER 11IP ACCESS LISTS LEVEL COMMANDS: EXTENDED...................................... 11-1

    CHAPTER 12IPV6 ACCESS LIST LEVEL COMMANDS ...................................................... 12-1

    March 2009 © 2009 Brocade Communications Systems, Inc. v

  • Switch and Router CLI Guide

    CHAPTER 13RIP LEVEL COMMANDS ............................................................................ 13-1

    CHAPTER 14IPV6 RIP LEVEL COMMANDS .................................................................... 14-1

    CHAPTER 15OSPF LEVEL COMMANDS......................................................................... 15-1

    CHAPTER 16OSPF VERSION 3 LEVEL COMMANDS ....................................................... 16-1

    CHAPTER 17IS-IS LEVEL COMMANDS .......................................................................... 17-1

    CHAPTER 18GLOBAL IS-IS LEVEL COMMANDS............................................................. 18-1

    CHAPTER 19IPV4 IS-IS UNICAST ADDRESS FAMILY LEVEL COMMANDS ........................ 19-1

    CHAPTER 20IPV6 IS-IS UNICAST ADDRESS FAMILY LEVEL COMMANDS ........................ 20-1

    CHAPTER 21BGP4 LEVEL COMMANDS......................................................................... 21-1

    CHAPTER 22GLOBAL BGP AND BGP4 UNICAST ADDRESS LEVEL COMMANDS ............ 22-1

    CHAPTER 23BGP4 MULTICAST ADDRESS FAMILY LEVEL COMMANDS........................... 23-1

    CHAPTER 24 VPNV4 UNICAST ADDRESS FAMILY LEVEL COMMANDS ............................ 24-1

    CHAPTER 25IPV6 BGP UNICAST ADDRESS FAMILY LEVEL COMMANDS ........................ 25-1

    vi © 2009 Brocade Communications Systems, Inc. March 2009

  • Contents

    CHAPTER 26IP TUNNEL LEVEL COMMANDS .................................................................. 26-1

    CHAPTER 27IPV6 TUNNEL LEVEL COMMANDS .............................................................. 27-1

    CHAPTER 28MSDP LEVEL COMMANDS ........................................................................ 28-1

    CHAPTER 29DVMRP LEVEL COMMANDS...................................................................... 29-1

    CHAPTER 30IPV6 PIM LEVEL COMMANDS.................................................................... 30-1

    CHAPTER 31PIM LEVEL COMMANDS ............................................................................ 31-1

    CHAPTER 32BROADCAST AND MULTICASTFILTER LEVEL COMMANDS ........................................................................ 32-1BROADCAST FILTER COMMANDS ...............................................................................................................32-1MULTICAST FILTER COMMANDS .................................................................................................................32-3

    CHAPTER 33ROUTE MAP LEVEL COMMANDS................................................................ 33-1

    CHAPTER 34VRRP LEVEL COMMANDS......................................................................... 34-1

    CHAPTER 35VRRPE LEVEL COMMANDS ...................................................................... 35-1

    CHAPTER 36MPLS LEVEL COMMANDS......................................................................... 36-1

    CHAPTER 37MPLS INTERFACE LEVEL COMMANDS....................................................... 37-1

    March 2009 © 2009 Brocade Communications Systems, Inc. vii

  • Switch and Router CLI Guide

    CHAPTER 38MPLS POLICY LEVEL COMMANDS ............................................................ 38-1

    CHAPTER 39MPLS PATH LEVEL COMMANDS ............................................................... 39-1

    CHAPTER 40MPLS SIGNALLED LSP LEVEL COMMANDS .............................................. 40-1

    CHAPTER 41MPLS SECONDARY PATH LEVEL COMMANDS ........................................... 41-1

    CHAPTER 42MPLS RSVP LEVEL COMMANDS.............................................................. 42-1

    CHAPTER 43MPLS STATIC LSP LEVEL COMMANDS..................................................... 43-1

    CHAPTER 44MPLS VLL LEVEL COMMANDS................................................................. 44-1

    CHAPTER 45MPLS LDP LEVEL COMMANDS ................................................................ 45-1

    CHAPTER 46MPLS VPLS LEVEL COMMANDS .............................................................. 46-1

    CHAPTER 47VLAN LEVEL COMMANDS......................................................................... 47-1

    CHAPTER 48WEB AUTHENTICATION LEVEL AT THE VLAN LEVEL.................................. 48-1

    CHAPTER 49VLAN TRANSLATION GROUPS LEVEL ....................................................... 49-1

    CHAPTER 50RATE LIMITING VLAN GROUPS LEVEL ...................................................... 50-1

    viii © 2009 Brocade Communications Systems, Inc. March 2009

  • Contents

    CHAPTER 51METRO RING LEVEL COMMANDS............................................................... 51-1

    CHAPTER 52VSRP LEVEL COMMANDS......................................................................... 52-1

    CHAPTER 53TOPOLOGY GROUP LEVEL COMMANDS...................................................... 53-1

    CHAPTER 54STP GROUP LEVEL COMMANDS ............................................................... 54-1

    CHAPTER 55GVRP LEVEL COMMANDS ........................................................................ 55-1

    CHAPTER 56802.1X PORT SECURITY LEVEL COMMANDS.............................................. 56-1

    CHAPTER 57MAC PORT SECURITY LEVEL COMMANDS................................................. 57-1

    CHAPTER 58CPU PROTECTION LEVEL COMMANDS....................................................... 58-1

    CHAPTER 59REAL SERVER LEVEL COMMANDS............................................................. 59-1

    CHAPTER 60APPLICATION PORT LEVEL COMMANDS ..................................................... 60-1

    CHAPTER 61WIRELESS AP LEVEL COMMANDS............................................................. 61-1

    CHAPTER 62WIRELESS VPN POLICY LEVEL COMMANDS .............................................. 62-1

    CHAPTER 63SHOW COMMANDS.................................................................................... 63-1

    March 2009 © 2009 Brocade Communications Systems, Inc. ix

  • Switch and Router CLI Guide

    APPENDIX ACommands Requiring a Reload ............................................................A-1

    x © 2009 Brocade Communications Systems, Inc. March 2009

  • Chapter 1Getting Started

    IntroductionThis reference describes the Command Line Interface (CLI) in the following devices:

    • Enterprise IronWare software releases, which apply to the following products:

    • NetIron 400/800/1500 Chassis devices with IronCore or JetCore management modules

    • BigIron 4000/8000/15000 Chassis devices with IronCore or JetCore management modules

    • FastIron II, FastIron II Plus, and FastIron III with M2 or higher management modules

    • FastIron 400/800/1500 Chassis devices with JetCore modules

    • FastIron 4802 Stackable device

    • Service Provider IronWare software releases, which apply to the following products:

    • NetIron 400/800/1500 Chassis devices with IronCore or JetCore management modules

    • BigIron 4000/8000/15000 Chassis devices with IronCore or JetCore management modules

    • NetIron 4802 Stackable device

    • FastIron 4802 Stackable device

    NOTE: You cannot use this software on FastIron Chassis devices.

    • Terathon devices that include the following:

    • BigIron MG8

    • NetIron 40G

    • NetIron IMR 640

    • FastIron family releases that include the following devices:

    • FastIron Edge Switch

    • IronPoint-FastIron Edge Switch (IP-FES) Release 01.3.00 and later

    • ServerIron product family

    For a list of enhancements in this edition, see the Switch and Router Installation and Basic Configuration Guide.

    March 2009 © 2009 Brocade Communications Systems, Inc. 1 - 1

  • Switch and Router CLI Guide

    For step-by-step instructions on how to install key features of the system, see the Switch and Router Installation and Basic Configuration Guide.

    NOTE: Not all commands in this reference are supported on all Layer 2 Switch and Layer 3 Switch platforms. Also, Stackable devices and Chassis devices may also have differing commands.

    This reference lists all the commands that appear at each command level for users with super-user access. If you are logged on with port-configuration access or read-only access, some of these commands will not be displayed and will not be available.

    This reference does not describe the Layer 2 Switch and Layer 3 Switch diagnostic commands or the ServerIron Transparent Cache Switching (TCS), Server Load Balancing (SLB), or Firewall Load Balancing (FWLB) commands. For information about the ServerIron TCS, SLB, and FWLB commands, see the Foundry ServerIron Installation and Configuration Guide. For information about the diagnostics commands, see the Diagnostic Guide.

    AudienceThis manual is designed for system administrators with a working knowledge of Layer 2 and Layer 3 switching and routing.

    If you are using a Brocade Layer 3 Switch, you should be familiar with the following protocols if applicable to your network – IP, RIP, OSPF, IS-IS, BGP4, MBGP, MPLS, IGMP, PIM, DVMRP, IPX, AppleTalk, FSRP, VRRP, and VRRPE.

    NomenclatureThis guide uses the following typographical conventions to show information:

    Italic highlights the title of another publication and occasionally emphasizes a word or phrase.

    Bold highlights a CLI command.

    Bold Italic highlights a term that is being defined.

    NOTE: A note emphasizes an important fact or calls your attention to a dependency.

    WARNING: A warning calls your attention to a possible hazard that can cause injury or death.

    CAUTION: A caution calls your attention to a possible hazard that can damage equipment.

    Related PublicationsThe following Brocade documents supplement the information in this guide.

    • Switch and Router Installation and Basic Configuration Guide – provides configuration guidelines for Layer 2 and Layer 3 devices and installation procedures for the Brocade devices with IronCore and JetCore modules, as well as Terathon and FastIron Edge Switch devices.

    • Security Guide – provides procedures for securing management access to Brocade devices and for protecting against Denial of Service (DoS) attacks.

    • Enterprise Configuration and Management Guide – provides configuration information for enterprise routing protocols including IP, RIP, IP multicast, OSPF, BGP4, VRRP and VRRPE. This guide applies to Brocade devices with IronCore and JetCore modules, as well as Terathon and FastIron Edge Switch devices.

    • NetIron Service Provider Configuration and Management Guide – provides configuration information for IS-IS

    1 - 2 © 2009 Brocade Communications Systems, Inc. March 2009

  • and MPLS for Brocade devices with IronCore and JetCore modules that support IS-IS and MPLS.

    • NetIron IMR 640 Service Provider Configuration and Management Guide – provides configuration information for IS-IS and MPLS for for the NetIron IMR 640.

    • Switch and Router Command Line Interface Reference – provides a list and syntax information for Brocade devices with IronCore and JetCore modules, as well as Terathon and FastIron Edge Switch devices.

    • Diagnostic Guide – provides descriptions of diagnostic commands that can help you diagnose and solve issues on IronCore, JetCore, and Terathon Layer 2 Switches and Layer 3 Switches.

    • BigIron MG8 Switch Installation and Basic Configuration Guide – provides installation procedures for the BigIron MG8. This guide also presents the management modules available in the device.

    • NetIron 40G Switch Installation and Basic Configuration Guide – provides installation procedures for the BigIron MG8. This guide also presents the management modules available in the device.

    • NetIron IMR 640 Installation and Basic Configuration Guide – provides procedures for installing modules into and connecting your DC power source(s) to the NetIron IMR 640 chassis, cabling the Ethernet interface ports, and performing a basic configuration of the software.

    • IronWare Management Information Base Reference – presents the Simple Network Management Protocol (SNMP) Management Information Base (MIB) objects that are supported in the Brocade devices.

    • IPv6 Configuration Guide – provide configuration information for IPv6 features on Brocade devices with IronCore and JetCore modules, as well as Terathon and FastIron Edge Switch devices.

    • IronPoint Wireless LAN Configuration Guide – presents the features for the IronPoint wireless LAN (WLAN), which is supported on the IronPoint-FastIron Edge Switch.

    Updates to ManualsManuals for this product may be updated between releases. For the latest edition of manuals, check the Brocade Knowledge Portal at kp.foundrynet.com.

    How to Get Help or Report ErrorsBrocade is committed to ensuring that your investment in our products remains cost-effective. If you need assistance, or find errors in the manuals, contact Brocade using one of the following options:

    Web AccessGo to kp.foundrynet.com and log in to the Knowledge Portal (KP) to obtain more information about a product, or to report documentation errors. To report errors, click on Cases > Create a New Ticket.

    E-mail AccessSent an e-mail to [email protected]

    Telephone Access1.877.TURBOCALL (887.2622) United States

    1.408.207.1600 Outside the United States

    Warranty CoverageContact Brocade using any of the methods listed above for information about the standard and extended warranties.

    March 2009 © 2009 Brocade Communications Systems, Inc. 1 - 3

  • Switch and Router CLI Guide

    1 - 4 © 2009 Brocade Communications Systems, Inc. March 2009

  • Chapter 2Using the Command Line Interface

    The CLI is a text-based interface for configuring and monitoring Brocade Layer 2 Switches and Layer 3 Switches. You can access the CLI through either a direct serial connection to the device or through a Telnet session.

    The commands in the CLI are organized into the following levels:

    • User EXEC – Lets you display information and perform basic tasks such as pings and trace routes.

    • Privileged EXEC – Lets you use the same commands as those at the User EXEC level plus configuration commands that do not require saving the changes to the system-config file.

    • CONFIG – Lets you make configuration changes to the device. To save the changes across reboots, you need to save them to the system-config file. The CONFIG level contains sub-levels for individual ports, for VLANs, for routing protocols, and other configuration areas.

    NOTE: By default, any user who can open a serial or Telnet connection to the Brocade device can access all these CLI levels. To secure access, you can configure Enable passwords or local user accounts, or you can configure the device to use Access Control Lists (ACLs), a RADIUS server, or a TACACS/TACACS+ server for authentication. See the Foundry Security Guide.

    To display a list of available commands or command options, enter “?” or press Tab. If you have not entered part of a command at the command prompt, all the commands supported at the current CLI level are listed. If you enter part of a command, then enter “?” or press Tab, the CLI lists the options you can enter at the point in the command string.

    The CLI supports command completion, so you do not need to enter the entire name of a command or option. As long as you enter enough characters of the command or option name to avoid ambiguity with other commands or options, the CLI understands what you are typing.

    The CLI supports the following line editing commands. To enter a line-editing command, use the CTRL-key combination for the command by pressing and holding the CTRL key, then pressing the letter associated with the command.

    Table 2.1: CLI Line-Editing Commands

    Ctrl-Key Combination Description

    Ctrl-A Moves to the first character on the command line.

    Ctrl-B Moves the cursor back one character.

    March 2009 © 2009 Brocade Communications Systems, Inc. 2 - 1

  • Switch and Router CLI Guide

    EXEC CommandsThere are two different levels of EXEC commands, the User Level and the Privileged Level. The User level commands are at the top of the CLI hierarchy. These are the first commands that you have access to when connected to the device through the CLI. At this level, you can view basic system information and verify connectivity but cannot make any changes to the device configuration. To make changes to the configuration, you must move to other levels of the CLI hierarchy. This is accomplished by the User EXEC level command enable at initial log-on. This command takes you to the Privileged EXEC level, from which you can reach the configuration command levels.

    Privileged LevelThe Privileged EXEC level commands primarily enable you to transfer and store software images and configuration files between the network and the system, and review the configuration.

    You reach this level by entering enable [] or enable at the User EXEC level.

    CONFIG CommandsCONFIG commands modify the configuration of a Layer 2 Switch or Layer 3 Switch. This reference describes the following CONFIG CLI levels.

    Global LevelThe global CONFIG level allows you to globally apply or modify parameters for ports on the device. You reach this level by entering configure terminal at the privileged EXEC level.

    Ctrl-C Escapes and terminates command prompts and ongoing tasks (such as lengthy displays), and displays a fresh command prompt.

    Ctrl-D Deletes the character at the cursor.

    Ctrl-E Moves to the end of the current command line.

    Ctrl-F Moves the cursor forward one character.

    Ctrl-K Deletes all characters from the cursor to the end of the command line.

    Ctrl-L; Ctrl-R Repeats the current command line on a new line.

    Ctrl-N Enters the next command line in the history buffer.

    Ctrl-P Enters the previous command line in the history buffer.

    Ctrl-U; Ctrl-X Deletes all characters from the cursor to the beginning of the command line.

    Ctrl-W Deletes the last word you typed.

    Ctrl-Z Moves from any CONFIG level of the CLI to the Privileged EXEC level; at the Privileged EXEC level, moves to the User EXEC level.

    Table 2.1: CLI Line-Editing Commands (Continued)

    Ctrl-Key Combination Description

    2 - 2 © 2009 Brocade Communications Systems, Inc. March 2009

  • Redundancy Level (Layer 3 Switches only)This redundancy level allows you to configure redundancy parameters for redundant management modules. You reach this level by entering the redundancy command at the global CONFIG level.

    Interface LevelThe interface level allows you to assign or modify specific port parameters on a port-by-port basis. You reach this level by entering interface ethernet , interface loopback , interface ve , or interface pos at the global CONFIG level.

    Trunk LevelThe trunk level allows you to change parameters for statically-configured trunk groups. You reach this level by entering a trunk command with the appropriate port parameters.

    IPV6 Access List LevelThe IPv6 access list level allows you to configure standard and extended ACLs for IPv6. You reach this level by entering the ipv6 access-list command at the global CONFIG level.

    Router RIP Level (Layer 3 Switches only)The RIP level allows you to configure parameters for the RIP routing protocol. You reach this level by entering the router rip command at the global CONFIG level.

    IPv6 RIP Level (Only on Brocade devices that support IPv6)The IPv6 RIP level allows you to configure parameters for the IPv6 RIP routing protocol. You reach this level by entering the ipv6 router rip command at the RIP level.

    Router OSPF Level (Layer 3 Switches only)The OSPF level allows you to configure parameters for the OSPF routing protocol. You reach this level by entering the router ospf command at the global CONFIG level.

    OSPF Version 3 Level (Only on Brocade devices that support IPv6)The OSPF version 3 level allows you to configure parameters for the OSPF version 3 routing protocol. You reach this level by entering the ipv6 router ospf command at the OSPF level.

    Router IS-IS Level (Layer 3 Switches only)The IS-IS level allows you to configure parameters for the IS-IS routing protocol. You reach this level by entering the router isis command at the global CONFIG level.

    Global IS-IS Level (Only on Brocade devices that support IPv6)The global IS-IS level is present only on Brocade devices that support IPv6. It allows you to configure the IS-IS protocol itself. You reach this level by entering the router isis command at the global CONFIG level.

    IPv4 IS-IS Unicast Address Family Level (Brocade devices that support IPv6 only)The IPv4 IS-IS unicast address family level is present only on Brocade devices that support IPv6. It allows you to configure IPv4 IS-IS unicast routes. You reach this level by entering the address-family ipv4 unicast command at the global IS-IS or IPv6 IS-IS unicast address family levels.

    IPv6 IS-IS Unicast Address Family Level

    March 2009 © 2009 Brocade Communications Systems, Inc. 2 - 3

  • Switch and Router CLI Guide

    (Only on Brocade devices that support IPv6)The IPv6 IS-IS unicast address family level is present only on Brocade devices that support IPv6. It allows you to configure IPv6 IS-IS unicast routes. You reach this level by entering the address-family ipv6 unicast command at the global IS-IS or IPv4 IS-IS unicast address family levels.

    BGP Level (Layer 3 Switches only)The BGP level allows you to configure Layer 3 Switches for Border Gateway Protocol version 4 (BGP4). You reach this level by entering the router bgp command at the global CONFIG level.

    Global BGP and BGP4 Unicast Address Family LevelThe global BGP and BGP4 unicast address family levels are present only on Brocade devices that support IPv6. The global BGP level allows you to configure the BGP routing protocol. The BGP4 unicast address family level allows you to configure a BGP4 unicast route. For backward compatibility, you can currently access BGP4 unicast address family commands at both global BGP configuration and BGP4 unicast address family configuration levels. Therefore, the global BGP and BGP4 unicast address family commands are documented together.

    You reach the global BGP level by entering the router bgp command at the global CONFIG level. You reach the BGP4 unicast address family level by entering the address-family ipv4 unicast command at the global BGP level.

    BGP4 Multicast Address Family Level (Only on Brocade devices that support IPv6)The BGP4 multicast address family level allows you to configure BGP4 multicast routes. You reach this level by entering the address-family ipv4 multicast command at the global BGP, BGP4 unicast address family, or IPv6 BGP unicast address family levels.

    IPv6 BGP Unicast Address Family Level (Only on Brocade devices that support IPv6)The IPv6 BGP unicast address family level allows you to configure IPv6 BGP unicast routes. You reach this level by entering the address-family ipv6 unicast command at the global BGP, BGP4 unicast address family, or BGP4 multicast address family levels.

    IP Tunnel Level (Layer 3 Switches only)The IP tunnel level allows you to define parameters for IP-in-IP tunnels to pass data through non-DVMRP and non-PIM IP multicast routers.

    You reach this level by entering the ip tunnel… command at the interface CONFIG level.

    IPv6 Tunnel Level (Layer 3 Switches only)The IPv6 Tunnel level provides commands to configure IPv6 tunnels. You reach this level by entering the interface tunnel command at the CONFIG level:

    Router MSDP Level (Layer 3 Switches only)The MSDP level allows you to configure details for the Multicast Source Discovery Protocol (MSDP). You reach this level by entering the router msdp command at the global CONFIG level.

    Router DVMRP Level (Layer 3 Switches only)The DVMRP level allows you to configure details for the DVMRP multicast protocol. You reach this level by entering the router dvmrp command at the global CONFIG level.

    2 - 4 © 2009 Brocade Communications Systems, Inc. March 2009

  • Router PIM Level (Layer 3 Switches only)The PIM level allows you to configure parameters for the Protocol Independent Multicast (PIM) routing protocol. You reach this level by entering the router pim command at the global CONFIG level.

    IPv6 Router PIM Level (Only on Brocade devices that support IPv6) The IPv6 Router PIM level allows you to configure parameters for the Protocol Independent Multicast (PIM) routing protocol in IPv6. You reach this level by entering the ipv6 router pim command at the global CONFIG level.

    Broadcast Filter LevelThe broadcast filter level allows you to assign broadcast filters to specific ports. You reach this level by entering broadcast filter... at the global CONFIG level.

    Multicast Filter LevelThe multicast filter level allows you to assign multicast filters to specific ports. You reach this level by entering multicast filter... at the global CONFIG level.

    Route Map Level (Layer 3 Switches only)The Route Map level allows you to configure parameters for a BGP4 route map. You reach this level by entering the route-map command at the global CONFIG level.

    Router VRRP Level (Layer 3 Switches only)The VRRP level allows you to configure parameters for the Virtual Router Redundancy Protocol (VRRP). You reach this level by entering the router vrrp command at the global CONFIG level, then entering the ip vrrp vrid command at the interface configuration level.

    Router VRRPE Level (Layer 3 Switches only)The VRRPE level allows you to configure parameters for VRRP Extended. You reach this level by entering the router vrrp-extended command at the global CONFIG level, then entering the ip vrrp-extended vrid command at the interface configuration level.

    MPLS LevelThe MPLS level allows you to configure Multiprotocol Label Switching on Brocade NetIron Internet Routers. You reach this level by entering the router mpls command at the Global CONFIG level.

    MPLS Interface LevelThe MPLS interface level allows you to configure parameters for an individual MPLS-enabled interface. You reach this level by entering the mpls-interface pos command at the MPLS level.

    MPLS Policy LevelThe MPLS policy level allows you to configure global MPLS parameters. You reach this level by entering the policy command at the MPLS level.

    MPLS Path LevelThe MPLS path level allows you to configure paths that specify a route across an MPLS domain. You reach this level by entering the path command at the MPLS level.

    MPLS Signalled LSP LevelThe MPLS signalled LSP level allows you to configure dynamically established LSPs. You reach this level by entering the lsp command at the MPLS level.

    March 2009 © 2009 Brocade Communications Systems, Inc. 2 - 5

  • Switch and Router CLI Guide

    MPLS Secondary Path LevelThe MPLS secondary path level allows you to configure redundant paths for an LSP. You reach this level by entering the secondary-path command at the MPLS signalled LSP level.

    MPLS RSVP LevelThe MPLS RSVP level allows you to configure RSVP parameters for use in signalling LSPs. You reach this level by entering the rsvp command at the MPLS level.

    MPLS Static LSP LevelThe MPLS static LSP level allows you to configure static LSPs. You reach this level by entering the static-lsp command at the MPLS level.

    MPLS VLL LevelThe MPLS VLL level allows you to configure MPLS Virtual Leased Line. You reach this level by entering the vll command at the MPLS level.

    MPLS LDP LevelThe MPLS LDP level allows you to configure Label Distribution Protocol (LDP). You reach this level by entering the ldp command at the MPLS level.

    MPLS VPLS LevelThe MPLS VPLS level allows you to configure MPLS Virtual Private LAN Services. You reach this level by entering the vpls command at the MPLS level.

    VLAN LevelPolicy-based VLANs allow you to assign VLANs on a protocol (IP, IPX, Decnet, AppleTalk, NetBIOS, Others), sub-net (IP sub-net and IPX network), AppleTalk cable, port, or 802.1q tagged basis.

    You reach this level by entering the vlan by port command at the Global CONFIG Level.

    Metro Ring LevelMetro rings provide Layer 2 connectivity and fast failover in ring topologies.

    You reach this level by entering the metro-ring command at the Global CONFIG Level.

    VSRP LevelThe VSRP level allows you to configure parameters for the Virtual Switch Redundancy Protocol (VSRP). You reach this level by entering the vsrp vrid command at the VLAN configuration level, then entering the vsrp vrid command at the VLAN configuration level.

    Topology Group LevelA topology group enables you to control the Layer 2 protocol configuration and Layer 2 state of a set of ports in multiple VLANs based on the configuration and states of those ports in a single master VLAN. One instance of the Layer 2 protocol controls all the VLANs.

    You reach this level by entering the topology-group command at the Global CONFIG Level.

    STP Group LevelSTP groups enable you to manage multiple port-based VLANs using the same spanning tree.

    You reach this level by entering the stp-group command at the Global CONFIG Level.

    2 - 6 © 2009 Brocade Communications Systems, Inc. March 2009

  • 802.1X Port Security LevelThe 802.1X port security level allows you to configure the 802.1X port security. You reach this level by entering the dot1x-enable command at the at the Global level.

    MAC Port Security LevelThe MAC port security level allows you to configure the port security feature. You reach this level by entering the port security command at the at the Global or Interface levels.

    CPU Protection LevelThe CPU protection level allows you to configure the Control Plane Security feature. You reach this level by entering the cpu-protection command at the at the Global level.

    GVRP LevelGARP VLAN Registration Protocol (GVRP) is a Generic Attribute Registration Protocol (GARP) application that provides VLAN registration service by means of dynamic configuration (registration) and distribution of VLAN membership information.

    You reach the GVRP level by entering the gvrp-enable command at the Global CONFIG Level.

    Real Server Level (Layer 3 Switches only)The Real Server level allows you to configure router-based health check parameters for a Layer 3 Switch to assist with Globally-distributed Server Load Balancing (SLB). See the “Route Health Injection” chapter of the Foundry Enterprise Configuration and Management Guide. You reach this level by entering the server real... command at the global CONFIG level.

    Application Port Level (Layer 3 Switches only)The Application Port level allows you to configure health check parameters for a TCP HTTP port. The commands at this level apply only when you are configuring a Layer 3 Switch to assist ServerIrons, third-party SLBs, or Web servers with globally-distributed SLB. See the “Route Health Injection” chapter of the Foundry Enterprise Configuration and Management Guide. You reach this level by entering the server port http | command at the global CONFIG level.

    NOTE: If you enter server port ?, numerous well-known port names are listed. The current software release supports only HTTP ports.

    Web Authentication Level at the VLAN LevelSome devices support the Web Authentication feature. The commands for this feature is configured at the webauth level which is under the VLAN level. You enter the webauth level by entering commands such as the following:

    IP-FES(config)#vlan 1IP-FES(config-vlan-1)#webauthIP-FES(config-vlan-1-webauth)#

    NOTE: The level is available only on the devices that support Web Authentication.

    VPN Policy LevelThe VPN Policy level allows you to define the virtual LAN (VPN) servers that can terminate VPN traffic on the wireless LAN. You reach this level by entering commands such as the following at the Global level:

    IP-FES(config)#wireless vpn-policy 100IP-FES(config-wireless-vpn-policy-100)#

    March 2009 © 2009 Brocade Communications Systems, Inc. 2 - 7

  • Switch and Router CLI Guide

    NOTE: The level is available only on the WLAN switches.

    Wireless AP LevelThe Wireless AP level allows you to identify the access points that participate in the wireless network. You reach this level by entering a command such as the following at the Global level.

    IP-FES(config)# wireless access-point 000c.db81.3918IP-FES(config-wireless-ap-000c.db81.3918)#

    NOTE: The level is available only on the WLAN switches.

    Accessing the CLI The CLI can be accessed through both serial and Telnet connections. For initial log on, you must use a serial connection. Once an IP address is assigned, you can access the CLI through Telnet.

    NOTE: When accessing the CLI through Telnet, you are prompted for a password. By default, the password required is the password you enter for general access at initial setup. You also have the option of assigning a separate password for Telnet access with the enable telnet password command, found at the Global Level.

    NOTE: At initial log on, all you need to do is type enable at the prompt, then press Return. You only need to enter a password after a permanent password is entered at the Global CONFIG Level of the CLI.

    Once connectivity to the device is established, you will see one of the following prompts:

    FI4802-PREM>BigIron>FastIronII>ServerIron>FastIron>NetIron>TurboIron>

    At this prompt ( > ), you are at the user EXEC level of the CLI command structure.

    NOTE: If you install switch code on a router, the command prompt begins with "SW-" to indicate the software change. This is true even if you change the system name.

    To reach the Global CONFIG Level, the uppermost level of the CONFIG commands, enter the following commands:

    BigIron> enable User Level-EXEC commandsBigIron# configure terminal Privileged Level-EXEC commandsBigIron(config)# Global Level-CONFIG commands

    You can then reach all other levels of the CONFIG command structure from this point.

    NOTE: Layer 2 Switch configuration is done using the following CLI levels: global, interface, VLAN port and protocol.

    2 - 8 © 2009 Brocade Communications Systems, Inc. March 2009

  • NOTE: Layer 3 Switch configuration is done using the following CLI levels: global, interface, IP tunnel, VLAN, and router levels.

    NOTE: The CLI prompt will change at each level of the CONFIG command structure, to easily identify the current level:

    NOTE: The CLI prompt at the interface level includes the port speed. The speed is one of the following:

    – e100 – The interface is a 10/100 port.

    – e1000 – The interface is a Gigabit port.

    For simplicity, the port speeds sometimes are not shown in example Interface level prompts in this manual.

    BigIron> User Level EXEC CommandBigIron# Privileged Level EXEC CommandBigIron(config)#Global Level CONFIG CommandBigIron(config-if-5/1)#Interface Level CONFIG CommandBigIron(config-lbif-1)#Loopback Interface CONFIG CommandBigIron(config-ve-1)#Virtual Interface CONFIG CommandBigIron(config-trunk-4/1-4/8)#Trunk group CONFIG CommandBigIron(config-if-tunnel)#IP Tunnel Level CONFIG CommandBigIron(config-bcast-filter-id-1)#Broadcast Filter Level CONFIG CommandBigIron(config-mcast-filter-id-1)#Multicast Filter Level CONFIG CommandBigIron(config-bgp-router)#BGP Level CONFIG CommandBigIron(config-dvmrp-router)#DVMRP Level CONFIG CommandBigIron(config-ospf-router)#OSPF Level CONFIG CommandBigIron(config-isis-router)#IS-IS Level CONFIG CommandBigIron(config-pim-router)#PIM Level CONFIG CommandBigIron(config-msdp-router)#MSDP Level CONFIG CommandBigIron(config-redundancy)#Redundant Management Module CONFIG CommandBigIron(config-rip-router)#RIP Level CONFIG Command BigIron(config-rs-realservername)#Real Server Level CONFIG Command BigIron(config-port-80)#Application Port CONFIG Command BigIron(config-bgp-routemap Map_Name)#Route Map Level CONFIG Command BigIron(config-vlan-1)#VLAN Port-based Level CONFIG CommandBigIron(config-vlan-atalk-proto)#VLAN Protocol Level CONFIG CommandBigIron(config-stp-group-1)#STP Group CONFIG CommandBigIron(config-gvrp)#GVRP CONFIG CommandBigIron(config-cpu-protection)#Control Plane Security CONFIG Command

    NetIron(config-mpls)#MPLS Level CONFIG CommandNetIron(config-mpls-interface)#MPLS Interface Level CONFIG CommandNetIron(config-mpls-policy)#MPLS Policy Level CONFIG CommandNetIron(config-mpls-path)#MPLS Path Level CONFIG CommandNetIron(config-mpls-lsp)#MPLS Signalled LSP Level CONFIG CommandNetIron(config-mpls-lsp-sec-path)#MPLS Secondary Path Level CONFIG CommandNetIron(config-mpls-rsvp)#MPLS RSVP Level CONFIG CommandNetIron(config-mpls-static-lsp)#MPLS Static LSP Level CONFIG Command

    March 2009 © 2009 Brocade Communications Systems, Inc. 2 - 9

  • Switch and Router CLI Guide

    Navigating Among Command LevelsTo reach other CLI command levels, you need to enter certain commands. At each level there is a launch command that allows you to move either up or down to the next level.

    CLI Command StructureMany CLI commands may require textual or numeral input as part of the command. These fields are either required or optional depending on how the information is bracketed. For clarity, a few CLI command examples are explained below.

    EXAMPLE:

    Syntax: deny redistribute all | bgp | rip | static address [match-metric | set-metric ]

    When an item is bracketed with “< >” symbols, the information requested is a variable and required.

    When an item is not enclosed by “< >” or “[ ]” symbols, the item is a required keyword.

    When an item is bracketed with “[ ]” symbols, the information requested is optional.

    When two or more options are separated by a vertical bar, “ | “, you must enter one of the options as part of the command.

    EXAMPLE:

    Syntax: priority normal | high means enter either priority normal or priority high

    For example, the command syntax above requires that either normal or high be entered as part of the command.

    To get a quick display of available options at a CLI level or for the next option in a command string, enter a question mark (?) at the prompt or press TAB.

    EXAMPLE:

    To view all available commands at the user EXEC level, enter the following or press TAB at the User EXEC CLI level:

    BigIron> ? enable exitfastbootpingshowstop-trace-routetraceroute

    You also can use the question mark (?) with an individual command, to see all available options or to check context.

    EXAMPLE:

    To view possible copy command options, enter the following:

    BigIron# copy ? flash running-config startup-config tftpBigIron# copy flash ? tftp

    Port NumbersMany CLI commands and displays use port numbers. The ports are labeled on the front panel.

    2 - 10 © 2009 Brocade Communications Systems, Inc. March 2009

  • The CLI examples in this manual use chassis-based port numbering (slot number/port number). When you enter commands on a FastIron Edge Switch, just specify the port number. The slot numbers used in the BigIron CLI examples apply only to Chassis devices.

    Here is an example. The following commands change the CLI from the global CONFIG level to the configuration level for the first port on the device.

    • BigIron commands:

    BigIron(config)# interface e 1/1BigIron(config-if-e100-1/1)#

    • FastIron Edge Switch commands:

    FES4802 Switch(config)# interface e 1FES4802 Switch(config-if-e100-1)#

    Searching and Filtering OutputYou can filter CLI output from show commands and at the --More-- prompt. You can search for individual characters, strings, or construct complex regular expressions to filter the output.

    Searching and Filtering Output from show commands

    You can filter output from show commands to display lines containing a specified string, lines that do not contain a specified string, or output starting with a line containing a specified string. The search string is a regular expression consisting of a single character or string of characters. You can use special characters to construct complex regular expressions. See “Using Special Characters in Regular Expressions” on page 2-14 for information on special characters used with regular expressions.

    Displaying Lines Containing a Specified StringThe following command filters the output of the show interface command for port 3/11 so it displays only lines containing the word “Internet”. This command can be used to display the IP address of the interface.

    BigIron# show interface e 3/11 | include Internet Internet address is 192.168.1.11/24, MTU 1518 bytes, encapsulation ethernet

    Syntax: | include

    NOTE: The vertical bar ( | ) is part of the command.

    Note that the regular expression specified as the search string is case sensitive. In the example above, a search string of “Internet” would match the line containing the IP address, but a search string of “internet” would not.

    Displaying Lines That Do Not Contain a Specified StringThe following command filters the output of the show who command so it displays only lines that do not contain the word “closed”. This command can be used to display open connections to the Brocade device.

    BigIron# show who | exclude closedConsole connections: established you are connecting to this session 2 seconds in idleTelnet connections (inbound): 1 established, client ip address 192.168.9.37 27 seconds in idleTelnet connection (outbound):SSH connections:

    Syntax: | exclude

    March 2009 © 2009 Brocade Communications Systems, Inc. 2 - 11

  • Switch and Router CLI Guide

    Displaying Lines Starting with a Specified StringThe following command filters the output of the show who command so it displays output starting with the first line that contains the word “SSH”. This command can be used to display information about SSH connections to the Brocade device.

    BigIron# show who | begin SSHSSH connections: 1 established, client ip address 192.168.9.210 7 seconds in idle 2 closed 3 closed 4 closed 5 closed

    Syntax: | begin

    Searching and Filtering Output at the --More-- Prompt

    The --More-- prompt is displayed when output extends beyond a single page. From this prompt, you can press the Space bar to display the next page, the Return or Enter key to display the next line, or Ctrl-C or Q to cancel the display. You can also search and filter output from this prompt. For example:

    At the --More-- prompt, you can press the forward slash key ( / ) and then enter a search string. The Brocade device displays output starting from the first line that contains the search string, similar to the begin option for show commands. For example:

    BigIron# ? append Append one file to another appletalk-ping Ping AppleTalk node atm ATM commands attrib Change flash card file attribute boot Boot system from bootp/tftp server/flash image cd Change flash card working slot or current directory chdir Change flash card working slot or current directory clear Clear table/statistics/keys clock Set clock configure Enter configuration mode copy Copy between flash, flash card, tftp, config/code debug Enable debugging functions (see also 'undebug') delete Delete flash card files dir List flash card files disable Disable a module before removing it enable Enable a disabled module erase Erase image/configuration from flash exit Exit Privileged mode fastboot Select fast-reload option format Format flash card gignpa Gigabit processor commands hd Display hex dump of flash card file kill Kill active CLI session--More--, next page: Space, next line: Return key, quit: Control-c

    --More--, next page: Space, next line: Return key, quit: Control-c/telnet

    2 - 12 © 2009 Brocade Communications Systems, Inc. March 2009

  • The results of the search are displayed:

    To display lines containing only a specified search string (similar to the include option for show commands) press the plus sign key ( + ) at the --More-- prompt and then enter the search string.

    The filtered results are displayed:

    To display lines that do not contain a specified search string (similar to the exclude option for show commands) press the minus sign key ( - ) at the --More-- prompt and then enter the search string.

    The filtered results are displayed:

    As with the commands for filtering output from show commands, the search string is a regular expression consisting of a single character or string of characters. You can use special characters to construct complex regular expressions. See the next section for information on special characters used with regular expressions.

    searching... telnet Telnet by name or IP address temperature temperature sensor commands terminal display syslog traceroute TraceRoute to IP node undebug Disable debugging functions (see also 'debug') undelete Undelete flash card files whois WHOIS lookup write Write running configuration to flash or terminal

    --More--, next page: Space, next line: Return key, quit: Control-c+telnet

    filtering... telnet Telnet by name or IP address

    --More--, next page: Space, next line: Return key, quit: Control-c-telnet

    filtering... sync-standby Synchronize active and standby module temperature temperature sensor commands terminal display syslog traceroute TraceRoute to IP node undebug Disable debugging functions (see also 'debug') undelete Undelete flash card files whois WHOIS lookup write Write running configuration to flash or terminal

    March 2009 © 2009 Brocade Communications Systems, Inc. 2 - 13

  • Switch and Router CLI Guide

    Using Special Characters in Regular Expressions

    You use a regular expression to specify a single character or multiple characters as a search string. In addition, you can include special characters that influence the way the software matches the output against the search string. These special characters are listed in the following table.

    Table 2.2: Special Characters for Regular Expressions

    Character Operation

    . The period matches on any single character, including a blank space.

    For example, the following regular expression matches “aaz”, “abz”, “acz”, and so on, but not just “az”:

    a.z

    * The asterisk matches on zero or more sequential instances of a pattern.

    For example, the following regular expression matches output that contains the string “abc”, followed by zero or more Xs:

    abcX*

    + The plus sign matches on one or more sequential instances of a pattern.

    For example, the following regular expression matches output that contains "de", followed by a sequence of “g”s, such as “deg”, “degg”, “deggg”, and so on:

    deg+

    ? The question mark matches on zero occurrences or one occurrence of a pattern.

    For example, the following regular expression matches output that contains "dg" or "deg":

    de?g

    Note: Normally when you type a question mark, the CLI lists the commands or options at that CLI level that begin with the character or string you entered. However, if you enter Ctrl-V and then type a question mark, the question mark is inserted into the command line, allowing you to use it as part of a regular expression.

    ^ A caret (when not used within brackets) matches on the beginning of an input string.

    For example, the following regular expression matches output that begins with “deg”:

    ^deg

    $ A dollar sign matches on the end of an input string.

    For example, the following regular expression matches output that ends with “deg”:

    deg$

    2 - 14 © 2009 Brocade Communications Systems, Inc. March 2009

  • If you want to filter for a special character instead of using the special character as described in the table above, enter “\” (backslash) in front of the character. For example, to filter on output containing an asterisk, enter the asterisk portion of the regular expression as “\*”.

    BigIron# show ip route bgp | include \*

    _ An underscore matches on one or more of the following:

    • , (comma)

    • { (left curly brace)

    • } (right curly brace)

    • ( (left parenthesis)

    • ) (right parenthesis)

    • The beginning of the input string

    • The end of the input string

    • A blank space

    For example, the following regular expression matches on “100” but not on “1002”, “2100”, and so on.

    _100_

    [ ] Square brackets enclose a range of single-character patterns.

    For example, the following regular expression matches output that contains “1”, “2”, “3”, “4”, or “5”:

    [1-5]

    You can use the following expression symbols within the brackets. These symbols are allowed only inside the brackets.

    • ^ – The caret matches on any characters except the ones in the brackets. For example, the following regular expression matches output that does not contain “1”, “2”, “3”, “4”, or “5”:

    [^1-5]

    • - The hyphen separates the beginning and ending of a range of characters. A match occurs if any of the characters within the range is present. See the example above.

    | A vertical bar separates two alternative values or sets of values. The output can match one or the other value.

    For example, the following regular expression matches output that contains either “abc” or “defg”:

    abc|defg

    ( ) Parentheses allow you to create complex expressions.

    For example, the following complex expression matches on “abc”, “abcabc”, or “defg”, but not on “abcdefgdefg”:

    ((abc)+)|((defg)?)

    Table 2.2: Special Characters for Regular Expressions (Continued)

    Character Operation

    March 2009 © 2009 Brocade Communications Systems, Inc. 2 - 15

  • Switch and Router CLI Guide

    Syntax ShortcutsA command or parameter can be abbreviated as long as enough text is entered to distinguish it from other commands at that level. For example, given the possible commands copy tftp… and config tftp…, possible shortcuts are cop tftp and con tftp respectively. In this case, co does not properly distinguish the two commands.

    Saving Configuration ChangesYou can make configuration changes while the device is running. The type of configuration change determines whether or not it becomes effective immediately or requires a save to flash (write memory) and reset of the system (reload), before it becomes active.

    This approach in adopting configuration changes:

    • Allows you to make configuration changes to the operating or running configuration of the device to address a short-term requirement or validate a configuration without overwriting the permanent configuration file, the startup configuration, that is saved in the system flash, and;

    • Ensures that dependent or related configuration changes are all cut in at the same time.

    In all cases, if you want to make the changes permanent, you need to save the changes to flash using the write memory command. When you save the configuration changes to flash, this will become the configuration that is initiated and run at system boot.

    NOTE: Most configuration changes are dynamic and thus do not require a software reload. If a command requires a software reload to take effect, the documentation states this.

    2 - 16 © 2009 Brocade Communications Systems, Inc. March 2009

  • Chapter 3Command List

    This chapter lists all the Layer 2 and Layer 3 commands on the following devices:

    • Devices with IronCore and JetCore modules

    • Terathon devices that include BigIron MG8, NetIron 40G, NetIron 640 IMR

    • FastIron Edge Switches

    • IronPoint FastIron Edge Switches

    NOTE: This reference does not describe the Layer 2 Switch or Layer 3 Switch diagnostic commands . For information about the diagnostic commands, see the Foundry Diagnostic Guide.

    The list is categorized by configuration levels, as presented in each chapter of this guide.

    Click on a command to display the description for that command.

    User EXEC Level Commands

    appletalk-pingenableenable enable fastbootipx-pingpingping ipv6showstop-traceroutetraceroutetraceroute ipv6

    Privileged EXEC Level Commands

    10gig copyappendappletalk-pingatm boot tftp

    March 2009 © 2009 Brocade Communications Systems, Inc. 3 - 1

  • Switch and Router CLI Guide

    atm copy slot1 | slot2 flashatm copy tftp flashattribboot system bootpboot system flash primaryboot system flash secondaryboot system slot1 | slot2boot system tftpcdchdirclear acl-on-arpclear appletalk arpclear appletalk cacheclear appletalk routeclear appletalk trafficclear arpclear atm mapclear auth-mac-tableclear dot1x mac-sessionclear dot1x statisticsclear dvmrp cacheclear dvmrp flowclear dvmrp routeclear fdp countersclear fdp tableclear gvrp statisticsclear igmp trafficclear ip acl-trafficclear ip bgp neighborclear ip bgp routesclear ip bgp trafficclear ip bgp vrfclear ip cacheclear ip dns cache-tableclear ip dr-aggregateclear ip interface ethernetclear ip msdp peerclear ip msdp sa-cacheclear ip msdp statisticsclear ip multicastclear ip multicast mcacheclear ip multicast statisticsclear ip multicast trafficclear ip natclear ip rip local routes vrfclear ip rip routes vrfclear ip routeclear ip rpfclear ip tcp connectionclear ip vrrp-statclear ipv6 access-listclear ipv6 bgp dampeningclear ipv6 bgp flap-statisticsclear ipv6 bgp local routes

    3 - 2 © 2009 Brocade Communications Systems, Inc. March 2009

  • clear ipv6 bgp neighbor last-packet-with-error | notification-errorsclear ipv6 bgp neighbor soft-outbound | softclear ipv6 bgp neighbor trafficclear ipv6 bgp neighbor flap-statisticsclear ipv6 bgp neighbor soft in prefix-filterclear ipv6 bgp routesclear ipv6 bgp trafficclear ipv6 cacheclear ipv6 flowsclear ipv6 mld trafficclear ipv6 neighborclear ipv6 rip routeclear ipv6 routeclear ipv6 trafficclear ipv6 tunnelclear ipx cacheclear ipx routeclear isisclear link-aggregateclear link-keepalive holddownclear link-keepalive statisticsclear lldp statisticsclear lldp neighborsclear loggingclear mac vplsclear mac-addressclear mpls rsvp statisticsclear mpls statisticsclear pim cacheclear pim countersclear pim rp-mapclear public-keyclear srcip-securityclear statisticsclear statistics dos-attackclear statistics rate-countersclear statistics rate-limitclear udld holddownclear udld statisticsclear vlan byte-accountingclear web-connectionclockconfigure terminalcopy copy flash flashcopy flash slot1 | slot2copy flash systemcopy flash tftpcopy running slot1 | slot2copy running-config tftpcopy slot1 | slot2 flashcopy slot1 | slot2 runningcopy slot1 | slot2 startcopy slot1|slot2 system

    March 2009 © 2009 Brocade Communications Systems, Inc. 3 - 3

  • Switch and Router CLI Guide

    copy slot1 | slot2 tftpcopy start slot1 | slot2copy startup-config tftpcopy tftp flashcopy tftp running-configcopy tftp slot1 | slot2copy tftp startup-configcopy tftp systemcpdeletedirdisabledot1x initializedot1x re-authenticateenableerase flash primaryerase flash secondaryerase startup-configexitext clear mac-vlanext refresh config-filefastbootfast-reloadforce-sync-standbyformathdipx-pingkilllp boot system flashlp boot system interactivelp boot system mplp boot system slot 1 | slot 2lp boot system tftplp sync alllocatemdmkdirmoremrinfomtraceroutencopy flash primary | secondary slot1 | slot2 ncopy flash primary | secondary tftpncopy running slot1 | slot2 ncopy running-config tftpncopy slot1 | slot2 flash primary | secondaryncopy slot1 | slot2 runningncopy slot1 | slot2 slot1 | slot2 []ncopy slot1 | slot2 startncopy slot1 | slot2 tftp []ncopy start slot1 | slot2 ncopy startup-config tftpncopy tftp flash primary | secondaryncopy tftp running-configncopy tftp slot1 | slot2 []

    3 - 4 © 2009 Brocade Communications Systems, Inc. March 2009

  • ncopy tftp startup-configpage-displaypingping atmvcpos boot tftppos copy slot1 | slot2 flashpos copy tftp flashpower-off lppower-off snmpower-on lppower-on snmpwdquitrconsolerconsole-exitrdreboot-standbyreloadreload atmreload posrenameresetrmdirset-fan-speedshowskip-page-displaysntp syncssh no-show-host-keysssh show-host-keysstop-traceroutesync-standbyswitchovertelnettemperature shutdowntemperature warningterminal monitortracerouteundeleteverifyvm bootvm copy flash flashvm copy tftp flashwhoiswrite memorywrite terminal

    Global CONFIG Level Commands

    aaa accountingaaa authenticationaaa authorizationaccess-list (BigIron MG8, NetIron 40G, NetIron IMR 640, and JetCore Layer 2)access-list delete

    March 2009 © 2009 Brocade Communications Systems, Inc. 3 - 5

  • Switch and Router CLI Guide

    access-list deny (extended)access-list deny (standard)access-list insertaccess-list permit (extended)access-list permit (standard)access-list rate-limitaccess-list remarkaccess-list replaceacl-denied-icmp-msgacl-duplication-checkaggregated-vlanaggregated-vlan-copy-cosaliasall-clientappletalk arp-ageappletalk arp retransmit-countappletalk arp retransmit-intervalappletalk glean-packetsappletalk qos socketappletalk rtmp-update-intervalappletalk zip-query-intervalarparp vrfatm boot interactiveauto-acl-rebindbanner execbanner incomingbanner motdboot system bootpboot system flash primaryboot system flash secondaryboot system slot1 | slot2boot system tftpbootp-relay-max-hopsbroadcast filterbroadcast limitcam-modecam-mode ipv6cam-partitioncam-partition profilecdp runchassis namechassis poll-timechassis trap-logclear access-listclock summer-timeclock timezoneconfirm-port-upconsolecpu-protectioncpupro-action hardware max-entriescpupro-action hardware modecpupro-action hardware ve-not-to-cpucpupro-action hardware-flooding

    3 - 6 © 2009 Brocade Communications Systems, Inc. March 2009

  • cpupro-action quick-agingcpupro-action unknown-unicast-toggle-timecpupro-condition sys camcpupro-condition sys cpucpu-usagecrypto keycrypto random-number-seedcrypto-ssl certificate generatecrypto-ssl certificate zeroizedefault-max-frame-sizedefault-mtu default-vlan-iddhcp-gateway-listdot1x-enableenableenable aaa consoleenable-bootguardenable password-displayenable password-min-lengthenable skip-page-displayenable snmp config-radiusenable snmp config-tacacsenable snmp ve-statisticsenable telnet authenticationenable strict-password-enforcementenable telnet passwordenable user password-maskingenable user password-agingenable user password-historyenable user disable-on-login failureenable-acl-counterenderrdisable recoveryerrdisable recovery intervalexitext get config-filefan initfan-read-speedfan read-tempfan set-speedfan-thresholdfast port-spanfast uplink-spanfdp holdtimefdp runfdp timerflash flow-controlgig-defaultgig-default auto-gig rfnglobal-protocol-vlanglobal-stpgvrp-base-vlan-idgvrp-enable

    March 2009 © 2009 Brocade Communications Systems, Inc. 3 - 7

  • Switch and Router CLI Guide

    gvrp-max-leaveall-timerhostnamehw-age-ip-host-entryhw-drop-acl-denied-packethw-moduleinline power legacyinterfaceinterface group-veinterface link-hold-downintf-proc-bandwidthip access-listip access-list disable-log-to-cpuip access-list frag-rate-on-interfaceip access-list frag-rate-on-systemip access-list logging-ageip access-policyip addressip arp-ageip as-pathip broadcast-zeroip cache-ageip community-listip default-gatewayip default-networkip dhcp-valid-checkip directed-broadcastip dns cache-entryip dns domain-listip dns domain-nameip dns poll-intervalip dns server-addressip domain-lookupip dont-use-aclip dr-aggregateip extcommunity-list route-mapip flow-aggregation cacheip flow-cache timeoutip flow-export destinationip flow-export enableip flow-export origin-asip flow-export protocol-disableip flow-export sourceip flow-export versionip forward-protocolip helper-use-responder-ipip high-perfip hw-drop-on-def-routeip icmpip icmp echo broadcast-requestip icmp redirectsip icmp unreachableip igmp group-membership-timeip igmp max-response-timeip igmp query-interval

    3 - 8 © 2009 Brocade Communications Systems, Inc. March 2009

  • ip igmp versionip ip-option-processip irdpip load-sharingip load-sharing by-hostip load-sharing route-by-hostip mrouteip mtuip multicastip multicast age-intervalip multicast filterip multicast hardware-dropip multicast-perfip multicast query-intervalip multicast-routingip multicast use-l4-camip nat inside destination listip nat inside destination staticip nat inside source listip nat inside source staticip nat poolip nat translationip net-aggregateip net-aggregate premiumip net-aggregate supremeip next hop-movement log-disableip pimsm-snoopingip policy prefer-direct-routeip policy route-mapip prefix-listip probe-arp-on-static-nexthopip proxy-arpip radius source-interfaceip rarpip rebind-aclip receive access-listip routeip route vrfip router-idip session tcp-mslip show-acl-service-numberip show-portnameip show-service-number-in-logip show-subnet-lengthip source-routeip ssh authentication-retriesip ssh clientip ssh idle-timeip ssh key-authenticationip ssh key-sizeip ssh password-authenticationip ssh permit-empty-passwdip ssh portip ssh pub-key-file

    March 2009 © 2009 Brocade Communications Systems, Inc. 3 - 9

  • Switch and Router CLI Guide

    ip ssh rsa-authenticationip ssh scpip ssh source-interfaceip ssh timeoutip ssl certificate-data-fileip ssl portip ssl private-key-fileip strict-acl-outip strict-acl-tcpip strict-acl-udpip supernet aggregateip supernet connectedip tacacs source-interfaceip tcp burst-normalip tcp keepaliveip tcp tcp-securityip telnet source-interfaceip tftp source-interfaceip ttlip vrfipv6 access-classipv6 access-listipv6 addressipv6 dns domain-nameipv6 dns server-addressipv6 enableipv6 hop-limitipv6 icmp error-intervalipv6 load-sharingipv6 load-sharing by-hostipv6 mld max-response-timeipv6 mld query-intervalipv6 neighboripv6 prefix-listipv6 routeipv6 router ospfipv6 router pimipv6 router ripipv6 unicast-routingipx forward-filteripx gns-round-robinipx max-rip-entriesipx max-sap-entriesipx netbios-allowipx rip-filteripx rip-filter-groupipx sap-access-listipx sap-filteripx sap-filter-groupjumbojumbo1920jumbo2048lacp system-prioritylink-keepalive link-confirm-up

    3 - 10 © 2009 Brocade Communications Systems, Inc. March 2009

  • link-keepalive ethernetlink-keepalive intervallink-keepalive retrieslink-keepalive holddown-thresholdlock-address ethernetlog host ipv6logginglogging bufferedlogging consolelogging hostlogging facilitylogging enablelp boot system flashlp boot system interactivelp boot system mplp boot system slot 1 | slot 2lp boot system tftplp-slot-prioritylldp advertise link-aggregationlldp advertise mac-phy-config-statuslldp advertise max-frame-sizelldp advertise med-capabilitieslldp advertise med-power-via-mdilldp advertise port-descriptionlldp advertise port-vlan-idlldp advertise power-via-mdilldp advertise system-capabilitieslldp advertise system-descriptionlldp advertise system-namelldp advertise vlan-namelldp enable portslldp enable receivelldp enable snmp med-topo-change-notificationslldp enable snmp notificationslldp max-neighbors-per-portlldp max-total-neighborslldp med fast-start-repeat-countlldp med location-id civic-addresslldp med location-id coordinate-basedlldp med location-id ecs-elinlldp reinit-delaylldp runlldp snmp-notification-intervallldp transmit-delaylldp transmit-holdlldp transmit-intervallldp med network-policy applicationmac-age-timemac-authentication auth-fail-vlan-idmac-authentication auth-passwd-formatmac-authentication disable-agingmac-authentication enablemac-authentication mac-filtermac-authentication max-age

    March 2009 © 2009 Brocade Communications Systems, Inc. 3 - 11

  • Switch and Router CLI Guide

    mac-authentication no-override-restrict-vlanmac-authentication password-overridemac-authentication save-dynamicvlan-to-configmac filtermac filter log-enablemcast-hw-replic-disablemcast-hw-replic-oarmirror-portmodulempls-bgp-shortcutmulticast filtermulticast limitmstp admin-edge-portmstp admin-pt2pt-macmstp commitmstp configuration instancemstp configuration namemstp configuration revisionmstp disablemstp edge-port-auto-detectmstp force-migration-checkmstp force-versionmstp forward-delaymstp hello-timemstp hopsmstp instancemstp max-agemstp namemstp revisionmstp scopemstp startnooptical-monitorpacket-loggingpacket-logging flashpassword-changeperf-modepingpolicy-mapport aps | bootpport securityport-prioritypos bootprivilegeprotected link-grouppvlan-preferenceqd-flow sinkqos map dscp-priorityqos map ip-prec-dscpqos mechanismqos nameqos profileqos tagged-priorityqos-tos map cos-dscp

    3 - 12 © 2009 Brocade Communications Systems, Inc. March 2009

  • qos-tos map dscp-dscpqos-tos map dscp-priorityqos-tos map ip-prec-dscpquitradius-serverrarprate-limit-arpredundancyrelative-utilizationremote-management rebindreserved-vlan-mapreverse-path-checkrl-vlan-grouprmon alarmrmon eventrmon historyroute-maproute-onlyrouter appletalkrouter bgprouter dvmrprouter fsrprouter ipxrouter isisrouter mplsrouter msdprouter ospfrouter ospf vrfrouter pimrouter riprouter vrrprouter vrrp-extendedrouter vsrpscale-timerserver portserver real-nameserver session-vm-limitservice password-encryptionset pcmciasflow destinationsflow enablesflow exportsflow max-packet-sizesflow polling-intervalsflow samplesflow sourcesflow versionshowsnm check-link-statussnm read-temperaturesnmp disablesnmp-clientsnmp-client ipv6snmp-server

    March 2009 © 2009 Brocade Communications Systems, Inc. 3 - 13

  • Switch and Router CLI Guide

    snmp-server communitysnmp-server contactsnmp-server enable ethernetsnmp-server enable trapssnmp-server enable traps holddown-timesnmp-server enable vlansnmp-server engineidsnmp-server groupsnmp-server host (v1 and v2c)snmp-server host (v3)snmp-server host ipv6snmp-server locationsnmp-server pw-checksnmp-server trap-sourcesnmp-server usersnmp-server viewsntp poll-intervalsntp serverspanning-treespanning-tree spanning-tree 802-1wspanning-tree 802-1w spanning-tree single 802-1wspanning-tree single spanning-tree single rstpsrcip-security attack-protection auto-attack-recovery-timesrcip-security age enablesrcip-security attack protection detection-triggersrcip-security attack protection enablesrcip-security attack-protection max-successive-attackssrcip-security attack protection polling-intervalsrcip-security attack protection retriessrcip-security disablesrcip-security enablesrcip-security log-limitsrcip-security max-agesrcip-security max-ipaddr-per-interfacesrcip-security no-dynamic-learningsrcip-security no-probe-on-agesrcip-security trusted-netssh access-groupstatic-mac-addressstp-groupsuper-spansuper-span-globalsystem hash-per-server-trunksystem-maxtacacs-servertag-typetelnet access-grouptelnet login-retriestelnet login-timeouttelnet servertelnet server enable ethernet

    3 - 14 © 2009 Brocade Communications Systems, Inc. March 2009

  • telnet server enable vlantelnet server suppress-reject-messagetelnet-clienttelnet-servertelnet-timeouttemperature shutdowntemperature warningtemp-poll-periodterminal lengthtftp client enable vlantftp disabletopology-grouptrace-l2trace-l2 showtrace-l2 vlantrunktrunk deployunknown-unicast limit use-dc-poweruse-local-management-macunaliasusername ... passwordusername ...create-passwordusername expiresvirtual-interface-macvlanvlan-dynamic-discoveryvlan-groupvlan max-vlansvlan-l3jumbovlan-translate-groupvm bootvm vm-mapvm vm-map per-port-dmavm vm-map port-dmavrrp-e slow-startwebauth-redirect-addressweb access-groupweb access-group ipv6web-clientweb-client ipv6web-managementweb-management enable vlanweb-management httpswireless access-pointwireless mobility domainwireless mobility peerwireless vpn-policywrite memorywrite terminal

    Redundant Management Module CONFIG Level Commands

    March 2009 © 2009 Brocade Communications Systems, Inc. 3 - 15

  • Switch and Router CLI Guide

    active-managementendexitforce-sync-standbynoquitshowsync-standbywrite memorywrite terminal

    Interface Level Commands

    appletalk addressappletalk cable-rangeappletalk denyappletalk deny additional-zonesappletalk permitappletalk routingappletalk zone-nameaps authenticateaps forceaps groupaps lockoutaps manualaps protectaps revertaps timersarp-port-rate-limitatm-hcsaddatm pvcatm-scramatm vc-per-vpauto-gigauto-polarity-disablebandwidthbcast-suppressbroadcast limitcdp enableclockcrcdhcp-gateway-listdisabledot1x auth-filterdot1x auth-timeout-actiondot1x filter-strict-securitydot1x multiple-hostsdot1x port-controldot1x re-auth-timeout-successdual-modeenableencapsulationend

    3 - 16 © 2009 Brocade Communications Systems, Inc. March 2009

  • exitfdp enableflow-controlframe-relaygig-defaultgig-default auto-gig rfngig-default auto-gig sw-controlhello paddinginline power (Chassis devices)inline power (FES)inline power configurepower (FES)inline power legacy-powerdevice configurepower (FES)inline power maxpower (Chassis devices)inline power priority (Chassis devices)inner-vlan-translate (BigIron MG8 and NetIron 40G)ip access-groupip access-group flow-modeip access-group frag denyip access-group frag denyip access-group frag inspectip access-group max-l4-camip access-group redirect-deny-to-interfip access-group ve-trafficip access-policy-groupip addressip arp-ageip bootp-gatewayip directed-broadcastip dont-advertiseip dvmrp advertise-localip dvmrp metricip dvmrp ttl-thresholdip encapsulationip followip follow aclip fsrp address preferenceip fsrp address track-portip fsrp address vir-rtr-ipip fsrp address vir-rtr-ip other-rtr-ipip fsrp address keep-alive-timeip fsrp address router-dead-timeip helper-addressip icmpip icmp redirectsip igmp port-versionip igmp static-groupip igmp trackingip igmp versionip irdpip jumbo-mtuip metricip mtuip multicast boundaryip-multicast-disable

    March 2009 © 2009 Brocade Communications Systems, Inc. 3 - 17

  • Switch and Router CLI Guide

    ip nat insideip nat outsideip ospf areaip ospf auth-change-wait-timeip ospf authentication-keyip ospf costip ospf database-filterip ospf dead-intervalip ospf hello-intervalip ospf md5-authenticationip ospf networkip ospf network non-broadcastip ospf network point-to-pointip ospf passiveip ospf priorityip ospf retransmit-intervalip ospf transmit-delayip pimip pim dr-priorityip pim-sparseip pim ttlip-policyip policy frag-match-dstip policy frag-match-srcip policy frag-match-src-destip policy route-mapip proxy-arp enableip redirectip ripip rip filter-groupip rip learn-defaultip rip metric-offsetip rip poison-reverseip rip prefix-listip rip route-mapip route-cache flowip router isisip tcp burst-normalip tunnelip use-acl-on-arpip verify unicast external-interfaceip verify unicast reverse-pathip verify unicast reverse-path external prefix-listip vrf forwardingip vrrpip vrrp auth-typeip vrrp-extendedip vrrp-extended auth-typeip vsrp auth-typeipg10ipg100ipg1000ipv6 addressipv6 address [anycast]

    3 - 18 © 2009 Brocade Communications Systems, Inc. March 2009

  • ipv6 enableipv6 mld port-versionipv6 mld static-groupipv6 mtuipv6 nd dad attemptipv6 nd managed-config-flagipv6 nd ns-intervalipv6 nd other-config-flagipv6 nd prefix-advertisementipv6 nd ra-intervalipv6 nd ra-lifetimeipv6 nd reachable-timeipv6 nd suppress-raipv6 ospf areaipv6 ospf costipv6 ospf dead-intervalipv6 ospf hello-intervalipv6 ospf instanceipv6 ospf mtu-ignoreipv6 ospf networkipv6 ospf passiveipv6 ospf priorityipv6 ospf retransmit-intervalipv6 ospf transmit-delayipv6 pim-sparseipv6 redirectsipv6 rip default-informationipv6 rip enableipv6 rip metric-offsetipv6 rip summary-addressipv6 router isisipv6 router ospfipv6 router ripipv6 traffic-filteripx forward-filter-groupipx gns-reply-disableipx netbios-allowipx networkipx output-gns-filteripx rip-filter-groupipx rip-max-packetsizeipx rip-multiplieripx sap-filter-groupipx sap-intervalipx sap-max-packetsizeipx sap-multiplieripx update-timeisis circuit-typeisis hello-intervalisis hello-multiplierisis metricisis passiveisis passwordisis priority

    March 2009 © 2009 Brocade Communications Systems, Inc. 3 - 19

  • Switch and Router CLI Guide

    keepalivel2-session-switchlink-aggregate active | passive | o